This vulnerability (CVE-2026-26182) involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with authorized privileges and can result in privilege escalation. The vulnerability is confirmed and has an official fix released by Microsoft. No known exploits in the wild have been reported at this time.

Successful exploitation of this vulnerability allows a local authorized attacker to elevate their privileges, potentially gaining higher-level access to the affected system. This can compromise system integrity, confidentiality, and availability as indicated by the high CVSS impact metrics (confidentiality, integrity, and availability all high).

An official fix is available from Microsoft for this vulnerability. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26182. No additional mitigation steps are indicated by the vendor advisory.